updates to plugins to make them pass stricter validation validation

[jameswt-oai]

Current State of Plugin Validations

• Repo-wide validation state: 29 pass / 2 fail across 31 plugins
• Remaining failing plugins:
  • build-ios-apps - dropped because of MCP packaging
  • cloudflare - dropped because of MCP packaging

Resolved In This Branch

box

• Status: fixed in this thread
• Why:
  • release validation failed because .codex-plugin/plugin.json was missing:
    • version
    • interface.longDescription
    • interface.termsOfServiceURL
    • interface.brandColor
  • skills/box/agents/openai.yaml also pointed skill icons outside the allowed plugin directory scope
• What changed:
  • added the missing plugin manifest fields
  • introduced version: "0.0.0"
  • removed icon_small and icon_large from the skill manifest so Box uses the plugin-level icons already defined in .codex-plugin/plugin.json
• Validation outcome:
  • now passes release validation

atlassian-rovo

• Status: fixed in this thread
• Why:
  • 5 skills referenced missing assets/app-icon.png via skill-level icon_small and icon_large
  • .codex-plugin/plugin.json was missing:
    • interface.developerName
    • interface.termsOfServiceURL
    • interface.brandColor
    • author.name after the latest validator update
• What changed:
  • removed the broken skill-level icon overrides so those skills inherit the plugin icon
  • added the missing plugin manifest fields
• Validation outcome:
  • now passes release validation

build-web-apps

• Status: fixed in this thread
• Why:
  • release validation failed because 5 skills were missing agents/openai.yaml
  • several skills used unsupported SKILL.md keys:
    • license
    • user-invocable
• What changed:
  • added minimal agents/openai.yaml files for the affected skills
  • removed unsupported frontmatter keys from the affected SKILL.md files
• Validation outcome:
  • now passes release validation
  • only warning-only metadata notes remain

canva

• Status: fixed in this thread
• Why:
  • release validation failed because .codex-plugin/plugin.json was missing required interface metadata
  • later validator updates also required author.name
• What changed:
  • added interface.developerName
  • added interface.brandColor
  • added author.name
• Validation outcome:
  • now passes release validation

coderabbit

• Status: fixed in this thread
• Why:
  • release validation failed because skills/coderabbit-review/agents/openai.yaml was missing
• What changed:
  • added a minimal agents/openai.yaml for coderabbit-review
• Validation outcome:
  • now passes release validation

figma

• Status: fixed in this thread
• Why:
  • release validation failed because:
    • .codex-plugin/plugin.json contained unsupported hooks
    • skills/figma-create-new-file/SKILL.md used disable-model-invocation: true, which is not the Codex-native schema
• What changed:
  • removed "hooks": "./hooks.json" from .codex-plugin/plugin.json
  • removed disable-model-invocation: true from skills/figma-create-new-file/SKILL.md
  • added policy.allow_implicit_invocation: false to skills/figma-create-new-file/agents/openai.yaml
• Validation outcome:
  • now passes release validation

game-studio

• Status: fixed in this thread
• Why:
  • release validation failed because 9 skills were missing agents/openai.yaml
• What changed:
  • added minimal agents/openai.yaml files for the affected skills
  • removed redundant skill-level brand_color values because the plugin already defines interface.brandColor
• Validation outcome:
  • now passes release validation

google-drive

• Status: fixed in this thread
• Why:
  • release validation failed because skills/google-drive-comments/agents/openai.yaml was missing
• What changed:
  • added a minimal agents/openai.yaml for google-drive-comments
• Validation outcome:
  • now passes release validation

hugging-face

• Status: fixed in this thread
• Why:
  • release validation failed because 11 skills were missing agents/openai.yaml
  • several skills used unsupported SKILL.md keys:
    • license
    • compatibility
• What changed:
  • added minimal agents/openai.yaml files for the affected skills
  • removed unsupported frontmatter keys from the affected SKILL.md files
• Validation outcome:
  • now passes release validation
  • only a warning-only metadata note remains in transformers.js

jam

• Status: fixed in this thread
• Why:
  • release validation failed because .codex-plugin/plugin.json was missing:
    • skills
    • interface.developerName
    • interface.brandColor
  • later validator updates also required author.name
• What changed:
  • added skills: "./skills/"
  • added interface.developerName
  • added interface.brandColor
  • added author.name
• Validation outcome:
  • now passes release validation

life-science-research

• Status: fixed in this thread
• Why:
  • release validation failed because 44 skills were missing agents/openai.yaml
• What changed:
  • added the missing agents/openai.yaml files across the plugin
  • kept the new manifests minimal and consistent with the existing style
• Validation outcome:
  • now passes release validation

linear

• Status: fixed in this thread
• Why:
  • release validation failed because .codex-plugin/plugin.json was missing:
    • version
    • interface.longDescription
    • interface.termsOfServiceURL
    • interface.brandColor
  • skills/linear/SKILL.md also had unsupported metadata frontmatter
• What changed:
  • added the missing plugin manifest fields
  • introduced version: "0.0.0"
  • removed the unsupported metadata block from skills/linear/SKILL.md
• Validation outcome:
  • now passes release validation

netlify

• Status: passes in this branch
• Why:
  • another thread handled the required fix
  • the plugin now validates cleanly
• What changed:
  • no additional changes were needed in this thread
• Validation outcome:
  • passes release validation

notion

• Status: passes in this branch
• Why:
  • the validator now treats metadata in SKILL.md as warning-only
  • the corresponding short_description values already exist in each skill's agents/openai.yaml
• What changed:
  • no plugin file changes were needed in this thread
• Validation outcome:
  • passes release validation with warnings only

remotion

• Status: fixed in this thread
• Why:
  • skills/remotion/agents/openai.yaml was missing
  • .codex-plugin/plugin.json was missing interface.screenshots
• What changed:
  • added a minimal agents/openai.yaml for the remotion skill
  • set interface.screenshots to an empty array
• Validation outcome:
  • now passes release validation
  • only a warning-only metadata note remains in skills/remotion/SKILL.md

stripe

• Status: fixed in this thread
• Why:
  • release validation failed because:
    • .codex-plugin/plugin.json was missing interface.developerName
    • .codex-plugin/plugin.json was missing interface.brandColor
    • skills/stripe-best-practices/agents/openai.yaml was missing
    • skills/upgrade-stripe/agents/openai.yaml was missing
    • skills/upgrade-stripe/SKILL.md used unsupported alwaysApply: false
    • later validator updates also required author.name
• What changed:
  • added the missing plugin manifest fields
  • added minimal agents/openai.yaml files for the affected skills
  • removed unsupported alwaysApply: false from skills/upgrade-stripe/SKILL.md
  • added author.name
• Validation outcome:
  • now passes release validation

superpowers

• Status: fixed in this thread
• Why:
  • 14 skills were missing agents/openai.yaml
  • .codex-plugin/plugin.json was missing:
    • interface.websiteURL
    • interface.privacyPolicyURL
    • interface.termsOfServiceURL
• What changed:
  • added minimal agents/openai.yaml files for the affected skills
  • added the three required plugin interface URLs
• Validation outcome:
  • now passes release validation

test-android-apps

• Status: passes in this branch
• Why:
  • release validation previously failed because the older validator rejected dependencies in agents/openai.yaml
• What changed:
  • no plugin file changes were needed in this thread
  • the validator was updated to allow dependencies
• Validation outcome:
  • now passes release validation

vercel

• Status: fixed in this thread
• Why:
  • release validation failed because:
    • .codex-plugin/plugin.json was missing interface.brandColor
    • 47 skills were missing agents/openai.yaml
    • many skills used unsupported top-level SKILL.md keys:
      • retrieval
      • chainTo
      • validate
      • summary
• What changed:
  • added interface.brandColor to the plugin manifest
  • added minimal agents/openai.yaml files for all affected skills
  • removed the unsupported top-level frontmatter keys while preserving the existing metadata blocks
• Validation outcome:
  • now passes release validation
  • only warning-only metadata notes remain, plus the ignored skills/_chain-audit.md file warning

Reviewed But Not Fixed In This Branch

build-ios-apps

• Status: dropped
• Why:
  • root .mcp.json is unsupported for release import
  • unsupported mcpServers remains in .codex-plugin/plugin.json
  • one skill manifest is still missing required interface.short_description
• PR note:
  • no fix attempted in this thread by decision

cloudflare

• Status: dropped
• Why:
  • root .mcp.json is unsupported for release import
  • unsupported mcpServers remains in .codex-plugin/plugin.json
  • several skills are still missing agents/openai.yaml
  • one skill still uses unsupported references frontmatter
• PR note:
  • no fix attempted in this thread by decision